Data Protection Policy - GDPR:
At the CODESPA Catalunya Foundation we are committed to ensuring that your personal data is protected and not misused. By providing us with your personal data and using our website, we understand that you have read and understood the terms related to the personal data protection information that are exposed.
The CODESPA Catalunya Foundation assumes responsibility for complying with current national and European data protection legislation (General Data Protection Regulation – Regulation (EU) 2016/679, of 27 April 2016, RGPD-) and aims to process your data in a lawful, fair and transparent manner.
I. Responsible for the processing of your personal data.
Fundació CODESPA Catalunya
N.I.F.: G-62336011
Address: Calle Rosselló 186, 5º 5ª, 08008 Barcelona
E-mail address: barcelona@fundaciocodespa.org
II. Main purposes of the processing of your personal data.
Candidate data
We process this data in order to select your application and manage your participation in the personnel selection processes carried out by the foundation.
Volunteer data
We process this data in order to maintain, develop and control the relationship that may be established between the parties, as well as to inform volunteers of our projects and activities, services and campaigns of the foundation, training courses and workshops, sending invitations to events and publications, activity reports, certificates of volunteering, thanks, congratulations and queries and incidents regarding the collaboration until the relationship between the two parties ends.
Data of members and donors
We process this data for the purpose of maintaining, developing and controlling the relationship that may be established between the parties, as well as informing members and donors of our projects and activities, services and campaigns of the foundation, training courses and workshops, sending invitations to events, publications, activity reports, certificates of donations, thanks, congratulations and queries and incidents regarding the collaboration until the relationship between the two parties comes to an end.
Subscriber data
We process this data in order to maintain, develop and control the relationship, as well as to inform subscribers of our projects and activities, services and campaigns of the foundation, training courses and workshops, sending invitations to events, publications, sending the monthly publication or newsletter of the activity, the impact of CODESPA, the report of activities, thanks, congratulations and queries and incidents about the collaboration until the end of the relationship between both parties.
Student data
We process this data in order to maintain, develop and control the relationship, as well as to inform the students about our projects and activities, services and campaigns of the foundation, training courses and workshops, sending invitations to events, publications, the report of activities, thanks, congratulations and queries and incidences about the collaboration, and documentation related to the object of our relationship.
Data of participants in events and activities
We process this data for the purpose of maintaining, developing and controlling the relationship that may be established between the parties, as well as informing participants of our projects and activities, services and campaigns of the foundation, training courses and workshops, sending invitations to events, publications, report of activities, thanks, congratulations and queries and incidents regarding the collaboration until the relationship between the two parties comes to an end.
Image data
We process this data obtained from you by means of photographs or recordings at the events held by CODESPA, and whose consent will be requested at the moment of registration to the event or at the event itself, in order to use them in our publications, on our website, in the composition of graphic files or graphic videos, elaborated to inform and/or publicise CODESPA’s activities.
Cookie data
We may use our own and third-party cookies when the user browses the different screens and pages of our website in order to recognise users so that we can offer them a better and more personalised service. However, in this respect, the user can control the security level of their equipment by means of the corresponding option in their browser.
Furthermore, the information obtained is completely anonymous, and under no circumstances can it be associated with a specific or identified user.
III. How we collect your personal data
Information you provide to us
We collect the personal data that you provide to us via our website, by means of forms or fields to be filled in, registration for our newsletter or via e-mail.
You will be informed of our Data Protection Policy at the time of collection.
Information we collect from your visits to our website
We collect and store limited personal information and anonymous aggregate statistics from all users who visit our website, whether you actively provide us with this information or are simply browsing our website. This information is collected through cookies, for more information see the Cookie Policy.
IV. Conservation periods
The personal data provided will be retained and processed to the extent that we need it in order to use it for the purpose for which it was collected and in accordance with the legal basis for processing it in accordance with applicable law.
We will keep your personal data for as long as a relationship exists or as long as you do not exercise your right to erasure, cancellation and/or restriction of the processing of your data. In these cases, we will block your data, without making any use of it, for as long as it may be necessary for the exercise or defence of claims, or as long as some kind of judicial, legal or contractual liability may arise from its processing, which must be attended to and for which its recovery is necessary.
V. Legitimation for the processing of your personal data
The legal basis for the processing of your personal data is:
- For compliance with the relationship with partners and donors.
- For compliance with various legal obligations.
- For legitimate interests, e.g. for security reasons, handling enquiries or requests.
- With your consent, for sending information about the foundation.
La oferta de servicios está basada en el consentimiento que se le solicita, sin que en ningún caso la retirada de este consentimiento condicione la ejecución del contrato o la relación existente entre las partes.
VI. Recipients of the communication of personal data
Personal data will be communicated when necessary to other national or international delegations of CODESPA for internal administrative purposes.
The personal data of course students may be transferred to the teachers of the courses in which they are enrolled or to public or private organisations collaborating in the courses and in compliance with legal obligations.
Fundació CODESPA Catalunya communicates personal data to service providers that may act as data processors. These third party companies only have access to the personal data necessary to carry out the service. They are required to keep your personal information confidential and cannot use it in any way other than what we have requested.
Fundació CODESPA Catalunya communicates personal data to the public administration when required to do so.
Fundació CODESPA Catalunya, in order to elaborate statistics, will be able to provide certain information about the user in a dissociated way to third parties.
VII. Data on minors
If the user is a minor, he/she is required to have the prior consent of his/her parents or guardians before proceeding to the inclusion of his/her personal data in the forms of the website. Fundació CODESPA Catalunya is exempt from any responsibility for the non-fulfilment of this requirement.
In case the volunteer of an activity is a minor, he/she must have the previous consent of his/her parents or guardians.
VIII. Your rights when you provide us with your personal data
1. What rights do you have in relation to the processing of your data?
The right to request access to your personal data
The right to request its rectification or erasure
The right to request the restriction of processing
The right to object to processing
The right to data portability
The right to withdraw the consent given
Access/correction and deletion: data subjects have the right to access their personal data, as well as to request the rectification of inaccurate data or, where appropriate, request its deletion when, among other reasons, the data is no longer necessary for the performance of the contract.
Limitation: in certain circumstances, data subjects may request the limitation of the processing of their data, in which case we will only keep them for the exercise or defence of claims.
Opposition: interested parties may oppose the processing of their data. Fundació CODESPA Catalunya will stop processing the data, except for legitimate, imperious reasons, or the exercise or defence of possible claims, and we will keep them duly blocked for the corresponding period of time while the legal obligations persist.
Likewise, the data subject has the right to oppose the adoption of automated individual decisions that could produce legal effects or significantly affect him/her.
Portability: data subjects may request to receive the data concerning them that they have provided to us or request that we send it to another data controller of their choice, in a structured, commonly used and machine-readable format.
2. When will we respond to your request?
We will respond to your requests as soon as possible and in any case within one month of receiving your request. This period may be extended by a further two months if necessary, taking into account the complexity and number of requests. The person in charge shall inform the person concerned of the extension within one month of the request.
3. Do you have the right to withdraw your consent?
The data subject has the right to withdraw the consent given at any time, without this affecting the lawfulness of the processing based on the consent given at the time of subscriptions or provision of data.
4. Where should you go to exercise your rights?
In order to exercise their rights, the interested party may send a letter with all their details, including a photocopy of their ID card or passport and indicating the right being exercised, to Fundació CODESPA Catalunya, calle Rosselló 186, 5º5ª, 08008 Barcelona or via the following e-mail address: barcelona@fundaciocodespa.org.
5. Do you have the right to complain?
When you have not obtained satisfaction in the exercise of your rights, you have the right to lodge a complaint with the National Supervisory Authority, for which purpose you should contact the Spanish Data Protection Agency.
IX. Security
Fundació CODESPA Catalunya adopts and updates its organisational and technical security measures in order to ensure that the processing of personal data it carries out complies with the requirements of current national and European data protection legislation.
X. Amendments to this data protection information
X. Amendments to this data protection information.
Fundació CODESPA Catalunya reserves the right to modify its Data Protection Policy in accordance with the applicable legislation at all times. Any modification of this Policy will be published on the website.
Last updated: 23 December 2019
